Manifest
$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.mft
File: 2B9BAD4A649403CAA3BD93A70813B16191638E2F.mft (raw, json)
Hash identifier: n/AbjcT5esIK9TwOgvuInTN8RfE0NHzpIkA4dE6WW8I=
Subject key identifier: B8:7F:43:AA:6A:AE:D7:91:06:75:2B:D2:81:A7:0C:DC:96:4C:CE:F3
Authority key identifier: 2B:9B:AD:4A:64:94:03:CA:A3:BD:93:A7:08:13:B1:61:91:63:8E:2F
Certificate issuer: /CN=2B9BAD4A649403CAA3BD93A70813B16191638E2F
Certificate serial: 5BCD41A95B4CD825BC737E2B6FE55553AA91996F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.mft
Manifest number: 0229
Signing time: Fri 23 Feb 2024 00:11:38 +0000
Manifest this update: Fri 23 Feb 2024 00:06:38 +0000
Manifest next update: Sat 24 Feb 2024 01:48:38 +0000
Files and hashes: 1: 323830343a383937383a3a2f33322d3335203d3e20323733363036.roa (hash: PXACFPWo6qYZYoNQ3pTWvu+OzT453yPwczlg/+iPJcw=)
2: 2B9BAD4A649403CAA3BD93A70813B16191638E2F.crl (hash: l8RbXl9zhYjzENpc4W0AxO9F/Rm4jUtNaBwA+Q5o+lQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:cd:41:a9:5b:4c:d8:25:bc:73:7e:2b:6f:e5:55:53:aa:91:99:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B9BAD4A649403CAA3BD93A70813B16191638E2F
Validity
Not Before: Feb 23 00:06:38 2024 GMT
Not After : Feb 24 01:48:38 2024 GMT
Subject: CN=B87F43AA6AAED79106752BD281A70CDC964CCEF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:cb:70:57:b1:da:66:7f:fa:b8:ef:89:44:
4e:8b:c9:a2:3b:9b:70:31:de:ce:b3:43:cc:91:1d:
89:49:d6:38:2e:a3:39:20:21:02:20:2e:bf:0e:3e:
b7:01:a8:fe:a4:9a:95:02:43:1d:80:88:02:ab:2a:
7f:82:39:38:ea:b8:f8:cd:6a:78:4c:5b:7d:e7:01:
cb:85:ce:14:31:96:38:da:4f:8b:50:1c:72:52:c2:
19:5f:d1:2e:e4:ba:46:c7:7f:4c:1f:19:38:5f:8a:
ca:74:b6:fc:bc:03:04:73:18:e0:09:88:dd:d6:86:
4b:a3:20:eb:b8:38:30:97:44:73:fe:b6:43:80:a7:
67:c9:98:46:d0:cb:df:39:f2:9c:00:70:2d:e9:e8:
7c:28:87:e3:0a:83:6b:da:fa:43:51:d0:0e:69:df:
d9:c7:44:da:d9:45:50:e9:97:7f:2e:be:12:6f:a8:
3e:60:90:20:03:83:9c:a0:59:32:78:6f:d1:56:db:
26:85:85:1a:7a:aa:55:66:db:ba:b0:b0:86:23:ca:
50:db:2c:c0:7f:c3:df:bf:1e:26:b1:30:7c:29:90:
38:a4:2d:7c:b7:e3:57:50:60:09:46:be:c1:32:89:
7b:29:20:a9:4d:ef:d8:49:30:8f:d2:13:00:35:90:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:43:AA:6A:AE:D7:91:06:75:2B:D2:81:A7:0C:DC:96:4C:CE:F3
X509v3 Authority Key Identifier:
keyid:2B:9B:AD:4A:64:94:03:CA:A3:BD:93:A7:08:13:B1:61:91:63:8E:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/2B9BAD4A649403CAA3BD93A70813B16191638E2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5c:16:44:9d:8f:40:07:33:c7:22:11:f7:73:5a:25:3f:77:
a4:29:64:15:a3:fe:85:05:16:b4:94:f7:e6:17:bf:2d:7d:4c:
bc:05:d8:35:a7:69:f7:ca:22:5f:71:a3:5c:bc:2a:39:e7:14:
db:5e:ef:33:92:ab:4c:03:5f:44:e4:8d:e5:3d:fc:56:ff:54:
24:e2:f9:52:18:9b:ef:71:16:9a:b1:e3:fb:17:fc:5b:41:d0:
d1:c8:5c:f5:fa:88:00:75:ae:03:bf:d8:64:ce:f8:12:50:38:
cd:7a:d1:bc:da:a2:e6:7b:9c:b3:30:1e:38:99:4f:cf:aa:31:
50:4f:a2:90:3a:5a:12:4e:55:35:c9:d6:50:87:f1:e9:e7:4b:
3d:81:95:14:42:e0:63:fa:2d:3a:8f:c7:9f:4e:5d:93:0d:6d:
b2:16:fd:43:51:f2:54:7a:e6:2f:3f:37:c4:84:47:ea:c9:94:
cc:c8:49:c4:3a:bf:ad:e3:af:62:48:aa:38:c1:07:55:97:84:
15:88:3b:98:75:5e:38:6e:a7:e6:01:e3:9a:80:cc:60:92:ec:
76:fa:8c:90:2c:70:6b:cd:7b:f4:98:b1:5e:ba:ec:d4:b6:70:
ce:86:5f:a0:32:b5:99:6a:c0:bb:de:e3:ed:b7:97:09:f9:8f:
d5:e6:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:33 2025 by rpki-client